13446: Enable TLS if given TLSCertificateFile and TLSKeyFile.

[arvados.git] / services / keepstore / usage.go

diff --git a/services/keepstore/usage.go b/services/keepstore/usage.go
index 672d7cf1694e78df6e5269dfdab58a5cddbb8139..8e83f6ce5f02c33182f40f89d42c0d7e3d4b59b7 100644 (file)
--- a/services/keepstore/usage.go
+++ b/services/keepstore/usage.go
@@ -133,6 +133,21 @@ PullWorkers:
     Maximum number of concurrent pull operations. Default is 1, i.e.,
     pull lists are processed serially.
 
+TLSCertificateFile:
+
+    Path to server certificate file in X509 format. Enables TLS mode.
+
+    Example: /var/lib/acme/live/keep0.example.com/fullchain
+
+TLSKeyFile:
+
+    Path to server key file in X509 format. Enables TLS mode.
+
+    The key pair is read from disk during startup, and whenever SIGHUP
+    is received.
+
+    Example: /var/lib/acme/live/keep0.example.com/privkey
+
 Volumes:
 
     List of storage volumes. If omitted or empty, the default is to